naftiko: 1.0.0-alpha2
info:
  label: PropelAuth Org API — Organization Management
  description: 'PropelAuth backend Organization API capability covering tenant CRUD, membership, role changes, and
    pending invite management. Self-contained Naftiko capability.'
  tags:
  - PropelAuth
  - Organizations
  - Multi-Tenancy
  - B2B
  created: '2026-05-25'
  modified: '2026-05-25'
binds:
- namespace: env
  keys:
    PROPELAUTH_API_KEY: PROPELAUTH_API_KEY
    PROPELAUTH_AUTH_URL: PROPELAUTH_AUTH_URL
capability:
  consumes:
  - type: http
    namespace: propelauth-org-management
    baseUri: '{{env.PROPELAUTH_AUTH_URL}}'
    description: PropelAuth Organization API operations.
    resources:
    - name: org
      path: /api/backend/v1/org/
      operations:
      - name: createOrg
        method: POST
        description: Create a new organization.
        outputRawFormat: json
        inputParameters:
        - name: body
          in: body
          type: object
          required: true
    - name: orgById
      path: /api/backend/v1/org/{orgId}
      operations:
      - name: fetchOrg
        method: GET
        description: Fetch an organization by ID.
        outputRawFormat: json
        inputParameters:
        - name: orgId
          in: path
          type: string
          required: true
      - name: updateOrg
        method: PUT
        description: Update an organization.
        inputParameters:
        - name: orgId
          in: path
          type: string
          required: true
        - name: body
          in: body
          type: object
          required: true
      - name: deleteOrg
        method: DELETE
        description: Delete an organization.
        inputParameters:
        - name: orgId
          in: path
          type: string
          required: true
    - name: addUserToOrg
      path: /api/backend/v1/org/add_user
      operations:
      - name: addUserToOrg
        method: POST
        description: Add a user to an organization.
        inputParameters:
        - name: body
          in: body
          type: object
          required: true
    - name: changeRole
      path: /api/backend/v1/org/change_role
      operations:
      - name: changeRole
        method: POST
        description: Change a user's role within an org.
        inputParameters:
        - name: body
          in: body
          type: object
          required: true
    - name: removeUserFromOrg
      path: /api/backend/v1/org/remove_user
      operations:
      - name: removeUserFromOrg
        method: POST
        description: Remove a user from an organization.
        inputParameters:
        - name: body
          in: body
          type: object
          required: true
    authentication:
      type: bearer
      value: '{{env.PROPELAUTH_API_KEY}}'
      placement: header
  exposes:
  - type: mcp
    namespace: propelauth-org-management-mcp
    port: 9091
    transport: http
    description: MCP adapter for PropelAuth Org Management.
    tools:
    - name: propelauth-create-org
      description: Create a PropelAuth organization (tenant).
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: propelauth-org-management.createOrg
      with:
        body: tools.body
    - name: propelauth-fetch-org
      description: Fetch a PropelAuth organization by ID.
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: propelauth-org-management.fetchOrg
      with:
        orgId: tools.orgId
    - name: propelauth-add-user-to-org
      description: Add a user to a PropelAuth organization.
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: propelauth-org-management.addUserToOrg
      with:
        body: tools.body
    - name: propelauth-change-role
      description: Change a user's role in a PropelAuth organization.
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: propelauth-org-management.changeRole
      with:
        body: tools.body
    - name: propelauth-remove-user-from-org
      description: Remove a user from a PropelAuth organization.
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: propelauth-org-management.removeUserFromOrg
      with:
        body: tools.body